Attention is currently required from: laforge.

dexter has posted comments on this change by dexter. ( 
https://gerrit.osmocom.org/c/pysim/+/38164?usp=email )

Change subject: pySim-prog: generate Ki and OPc value using _digits() function
......................................................................


Patch Set 2:

(1 comment)

Patchset:

PS1:
> the question is whether this wasn't intended as a security mechansim (keys 
> should always be random)?
When we use the the _digits function, then we have the advantage that we can 
identify the entire dataset via the num parameter. Otherweise the dataset 
basically lacks the key material. Each programming cycle will generate new keys.

However, I also see that there may be security concerns. I can not say how easy 
it is to restore the secret random seed from let's say a few IMSIs, which were 
also generated with the same seed.



--
To view, visit https://gerrit.osmocom.org/c/pysim/+/38164?usp=email
To unsubscribe, or for help writing mail filters, visit 
https://gerrit.osmocom.org/settings?usp=email

Gerrit-MessageType: comment
Gerrit-Project: pysim
Gerrit-Branch: master
Gerrit-Change-Id: Ib53d9d04a2073dafcca7cd21b0324bee5a23c540
Gerrit-Change-Number: 38164
Gerrit-PatchSet: 2
Gerrit-Owner: dexter <[email protected]>
Gerrit-Reviewer: Jenkins Builder
Gerrit-CC: laforge <[email protected]>
Gerrit-Attention: laforge <[email protected]>
Gerrit-Comment-Date: Mon, 16 Sep 2024 11:55:25 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: laforge <[email protected]>

Reply via email to